https://www.theverge.com/2018/6/28/17509720/california-consumer-privacy-act-legislation-law-vote

California lawmakers passed one of the toughest data privacy bills in the United States today, as they faced pressure from an even stronger ballot measure in the state.

The California Data Privacy Protection Act is set to dramatically change how businesses handle data in the most populous state. Companies that store personal information — from major players like Google and Facebook, down to small businesses — will be required to disclose the types of data they collect, as well as allow consumers to opt out of having their data sold. The bill, which passed both chambers unanimously, now heads to Gov. Jerry Brown’s desk. He has not openly committed to signing it into law.